5

I've recently encountered problems trying to log into anything that relies on login.launchpad.net. If I try to sign in to, say, http://review.openstack.org, that takes me to https://login.launchpad.net/some_random_string/+decide. After filling in my credentials and clicking "Log in", I end at up https://login.launchpad.net/some_random_string/+login with the message:

Bad Request

Bad bot, go away! Request aborted.

It appears to be browser plugin related (using Chrome instead of Firefox avoids the problem, as does starting Firefox in safe mode, which disabled all add-ons).

I'm using Firefox 38.0.5. I have uBlock installed, but even with that plugin disabled I still see the same behavior. I am currently going through the process of disabling one plugin at a time, but so far nothing other than safe mode seems to work.

Does anyone know what could be the root cause of this behavior?

Update

It appears to be the LastPass plugin, for reasons that are still mysterious. I'm going to see if I can trace the login request and see what's different with this plugin enabled.

5
  • Which version of Firefox are you using?
    – Wilf
    Jul 20, 2015 at 13:40
  • @Wilf I added that to the question.
    – larsks
    Jul 20, 2015 at 13:42
  • I haven't tried uBlock (i use a mix of NoScript and other stuff), but it may have modified stuff in about:config etc to cause this behaviour (its only preliminary reviewed so that is very possible - it works here with my trusted addons). You could try creating a new Firefox profile (using firefox -P. If it is a issue with the uBlock Addon you can report it here, perhaps linking to this.
    – Wilf
    Jul 20, 2015 at 13:46
  • If you track this down further, please follow up to bugs.launchpad.net/canonical-identity-provider/+bug/1474841 for the benefit of the SSO developers. Jul 21, 2015 at 9:49
  • Same here; recent 15.04 fresh install and Lastpass plugin in Firefox.
    – Rob Fisher
    Aug 14, 2015 at 14:19

3 Answers 3

3

Although this is fixed for LastPass Users, the underlying issue was not solved.

The login form contains an honeypot field named "openid.usernamesecret". It is made invisible by CSS property "display:none". It's the bad boy here: It will also be filled by other password managers (KeeFox in my case), with your old username.

<div style="display: none;">
    <label>Dieses Feld leer lassen, um zu beweisen, dass Sie ein Mensch sind
        <input name="openid.usernamesecret" value="[email protected]" type="text">
    </label>
</div>
  • So delete the entry from KeePass2 / KeePassX / LasstPass or other form helper addon (remember your password though).
  • Make sure the field is empty when you reload the page, before you login (check with Firebug or Web Inspector). In case you don't know how to use those tools, just restart Firefox.
1
  • 1
    Or simply type your password in manually. It seems any and every auto fill system gets fooled by the honey pot on the page. Nov 7, 2019 at 18:21
2

I contacted LastPass support, and they provided the following suggestion:

  1. Please remove the site in question from your vault (have your username and password handy)
  2. And re-save using Save All Entered Data functions: https://helpdesk.lastpass.com/adding-a-site/#h1
  3. try clearing cache by going to Lastpass icon> Tools> Advanced> Refresh sites and then clear local cache, log out then log back in. Test the issue again.

This seems to have resolved my issue, and I am once again able to log in to launchpad etc.

1

In my case, It was the problem with the inbuilt password manager in firefox I had to clear the website preferences and Delete the password entry in firefox lockwise

Just go to,

= -> Passwords -> Search for login.launchpad.net -> and delete the login

Don't forget to remember the password. I think reporting this as a bug in the site is better.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .